Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
AlmaLinux kernel may crash or expose data
published 1 year ago
Summary
The core kernel components of AlmaLinux have several bugs that could cause system crashes, memory corruption, or unintended data exposure. Updating the AlmaLinux kernel packages will apply fixes that stop these problems from being exploited. Apply the latest kernel update as soon as possible to keep your servers stable and secure.
What to do
- Update almalinux bpftool to version 4.18.0-553.62.1.el8_10.
- Update almalinux kernel to version 4.18.0-553.62.1.el8_10.
- Update almalinux kernel-abi-stablelists to version 4.18.0-553.62.1.el8_10.
- Update almalinux kernel-core to version 4.18.0-553.62.1.el8_10.
- Update almalinux kernel-cross-headers to version 4.18.0-553.62.1.el8_10.
- Update almalinux kernel-debug to version 4.18.0-553.62.1.el8_10.
- Update almalinux kernel-debug-core to version 4.18.0-553.62.1.el8_10.
- Update almalinux kernel-debug-devel to version 4.18.0-553.62.1.el8_10.
- Update almalinux kernel-debug-modules to version 4.18.0-553.62.1.el8_10.
- Update almalinux kernel-debug-modules-extra to version 4.18.0-553.62.1.el8_10.
- Update almalinux kernel-devel to version 4.18.0-553.62.1.el8_10.
- Update almalinux kernel-doc to version 4.18.0-553.62.1.el8_10.
- Update almalinux kernel-headers to version 4.18.0-553.62.1.el8_10.
- Update almalinux kernel-modules to version 4.18.0-553.62.1.el8_10.
- Update almalinux kernel-modules-extra to version 4.18.0-553.62.1.el8_10.
- Update almalinux kernel-tools to version 4.18.0-553.62.1.el8_10.
- Update almalinux kernel-tools-libs to version 4.18.0-553.62.1.el8_10.
- Update almalinux kernel-tools-libs-devel to version 4.18.0-553.62.1.el8_10.
- Update almalinux kernel-zfcpdump to version 4.18.0-553.62.1.el8_10.
- Update almalinux kernel-zfcpdump-core to version 4.18.0-553.62.1.el8_10.
- Update almalinux kernel-zfcpdump-devel to version 4.18.0-553.62.1.el8_10.
- Update almalinux kernel-zfcpdump-modules to version 4.18.0-553.62.1.el8_10.
- Update almalinux kernel-zfcpdump-modules-extra to version 4.18.0-553.62.1.el8_10.
- Update almalinux perf to version 4.18.0-553.62.1.el8_10.
- Update almalinux python3-perf to version 4.18.0-553.62.1.el8_10.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| AlmaLinux:8 | almalinux | bpftool |
< 4.18.0-553.62.1.el8_10 Fix: upgrade to 4.18.0-553.62.1.el8_10
|
| AlmaLinux:8 | almalinux | kernel |
< 4.18.0-553.62.1.el8_10 Fix: upgrade to 4.18.0-553.62.1.el8_10
|
| AlmaLinux:8 | almalinux | kernel-abi-stablelists |
< 4.18.0-553.62.1.el8_10 Fix: upgrade to 4.18.0-553.62.1.el8_10
|
| AlmaLinux:8 | almalinux | kernel-core |
< 4.18.0-553.62.1.el8_10 Fix: upgrade to 4.18.0-553.62.1.el8_10
|
| AlmaLinux:8 | almalinux | kernel-cross-headers |
< 4.18.0-553.62.1.el8_10 Fix: upgrade to 4.18.0-553.62.1.el8_10
|
| AlmaLinux:8 | almalinux | kernel-debug |
< 4.18.0-553.62.1.el8_10 Fix: upgrade to 4.18.0-553.62.1.el8_10
|
| AlmaLinux:8 | almalinux | kernel-debug-core |
< 4.18.0-553.62.1.el8_10 Fix: upgrade to 4.18.0-553.62.1.el8_10
|
| AlmaLinux:8 | almalinux | kernel-debug-devel |
< 4.18.0-553.62.1.el8_10 Fix: upgrade to 4.18.0-553.62.1.el8_10
|
| AlmaLinux:8 | almalinux | kernel-debug-modules |
< 4.18.0-553.62.1.el8_10 Fix: upgrade to 4.18.0-553.62.1.el8_10
|
| AlmaLinux:8 | almalinux | kernel-debug-modules-extra |
< 4.18.0-553.62.1.el8_10 Fix: upgrade to 4.18.0-553.62.1.el8_10
|
| AlmaLinux:8 | almalinux | kernel-devel |
< 4.18.0-553.62.1.el8_10 Fix: upgrade to 4.18.0-553.62.1.el8_10
|
| AlmaLinux:8 | almalinux | kernel-doc |
< 4.18.0-553.62.1.el8_10 Fix: upgrade to 4.18.0-553.62.1.el8_10
|
| AlmaLinux:8 | almalinux | kernel-headers |
< 4.18.0-553.62.1.el8_10 Fix: upgrade to 4.18.0-553.62.1.el8_10
|
| AlmaLinux:8 | almalinux | kernel-modules |
< 4.18.0-553.62.1.el8_10 Fix: upgrade to 4.18.0-553.62.1.el8_10
|
| AlmaLinux:8 | almalinux | kernel-modules-extra |
< 4.18.0-553.62.1.el8_10 Fix: upgrade to 4.18.0-553.62.1.el8_10
|
| AlmaLinux:8 | almalinux | kernel-tools |
< 4.18.0-553.62.1.el8_10 Fix: upgrade to 4.18.0-553.62.1.el8_10
|
| AlmaLinux:8 | almalinux | kernel-tools-libs |
< 4.18.0-553.62.1.el8_10 Fix: upgrade to 4.18.0-553.62.1.el8_10
|
| AlmaLinux:8 | almalinux | kernel-tools-libs-devel |
< 4.18.0-553.62.1.el8_10 Fix: upgrade to 4.18.0-553.62.1.el8_10
|
| AlmaLinux:8 | almalinux | kernel-zfcpdump |
< 4.18.0-553.62.1.el8_10 Fix: upgrade to 4.18.0-553.62.1.el8_10
|
| AlmaLinux:8 | almalinux | kernel-zfcpdump-core |
< 4.18.0-553.62.1.el8_10 Fix: upgrade to 4.18.0-553.62.1.el8_10
|
| AlmaLinux:8 | almalinux | kernel-zfcpdump-devel |
< 4.18.0-553.62.1.el8_10 Fix: upgrade to 4.18.0-553.62.1.el8_10
|
| AlmaLinux:8 | almalinux | kernel-zfcpdump-modules |
< 4.18.0-553.62.1.el8_10 Fix: upgrade to 4.18.0-553.62.1.el8_10
|
| AlmaLinux:8 | almalinux | kernel-zfcpdump-modules-extra |
< 4.18.0-553.62.1.el8_10 Fix: upgrade to 4.18.0-553.62.1.el8_10
|
| AlmaLinux:8 | almalinux | perf |
< 4.18.0-553.62.1.el8_10 Fix: upgrade to 4.18.0-553.62.1.el8_10
|
| AlmaLinux:8 | almalinux | python3-perf |
< 4.18.0-553.62.1.el8_10 Fix: upgrade to 4.18.0-553.62.1.el8_10
|
Original advisory text
Moderate: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: cifs: potential buffer overflow in handling symlinks (CVE-2022-49058)
* kernel: media: uvcvideo: Remove dangling pointers (CVE-2024-58002)
* kernel: media: uvcvideo: Fix double free in error path (CVE-2024-57980)
* kernel: x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CVE-2025-21991)
* kernel: net: atm: fix use after free in lec_send() (CVE-2025-22004)
* kernel: ext4: fix off-by-one error in do_split (CVE-2025-23150)
* kernel: ext4: ignore xattrs past end (CVE-2025-37738)
* kernel: misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CVE-2022-49788)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Security Fix(es):
* kernel: cifs: potential buffer overflow in handling symlinks (CVE-2022-49058)
* kernel: media: uvcvideo: Remove dangling pointers (CVE-2024-58002)
* kernel: media: uvcvideo: Fix double free in error path (CVE-2024-57980)
* kernel: x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CVE-2025-21991)
* kernel: net: atm: fix use after free in lec_send() (CVE-2025-22004)
* kernel: ext4: fix off-by-one error in do_split (CVE-2025-23150)
* kernel: ext4: ignore xattrs past end (CVE-2025-37738)
* kernel: misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CVE-2022-49788)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References
- https://access.redhat.com/errata/RHSA-2025:11298 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2022-49058 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2022-49788 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2024-57980 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2024-58002 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2025-21991 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2025-22004 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2025-23150 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2025-37738 Third Party Advisory
- https://bugzilla.redhat.com/2348254 Third Party Advisory
- https://bugzilla.redhat.com/2348513 Third Party Advisory
- https://bugzilla.redhat.com/2348599 Third Party Advisory
- https://bugzilla.redhat.com/2356917 Third Party Advisory
- https://bugzilla.redhat.com/2357142 Third Party Advisory
- https://bugzilla.redhat.com/2363268 Third Party Advisory
- https://bugzilla.redhat.com/2363305 Third Party Advisory
- https://bugzilla.redhat.com/2363378 Third Party Advisory
- https://errata.almalinux.org/8/ALSA-2025-11298.html Vendor Advisory
Timeline
Published16 Jul 2025
Updated29 Oct 2026
First seen29 Oct 2026
Sources
ALSA-2025:11298 · OSV
Track software like this
Free during beta